操作系统虚拟补丁服务器,基于虚拟数据库和虚拟补丁的数据库安全防护系统和方法 Database Security system and method based on virtual database ...

摘要：

本发明提供了一种基于虚拟数据库和虚拟补丁的数据库安全防护系统和方法,采用服务映射的方式建立虚拟数据库服务器将真实数据库服务器隐藏,同时融合二次认证和二次权限检查技术,实时处理到达虚拟数据库服务器的网络请求数据包,从而以达到安装数据库补丁的同等安全效果. The present invention provides a system and method for database security based on virtual database and virtual patches, using service maps the way to establish a virtual database server's database server to hide, while incorporating the secondary authentication and authorization checking of secondary technology, real-time processing to reach virtual database server request packet so as to achieve the same effect install the database security patches. 本发明包括服务映射和二次认证及二次权限检查两种关键技术,所有合法且正常的安全访问可以顺利通过映射后的虚拟数据库服务器,从真实数据库服务器当中获得相关数据;而对于大部分的非授权访问及明显的攻击行为,虚拟数据库服务器中的相关过滤机制会将此类请求进行阻断,从而保证了真实数据库服务器的安全运行以及数据库中敏感数据的安全性. The present invention includes a service mapping and the secondary authentication and authorization checking two key secondary technology, all legitimate and normal security access can go through the mapped virtual database server, obtain the relevant data from the database server were true; and for most of the unauthorized access and attacks obviously, virtual database servers such requests related to the filtering mechanism will be blocked, thus ensuring the safety of the safe operation of a real database server and the database of sensitive data.

展开